cyber security Archives - Page 6 of 7

TGCSB organizes Cyber Awareness Day to tackle digital frauds

Telangana Cyber Security Bureau Launches ‘Cyber Jaagrookta Diwas’ to Combat digital arrest Scams The Telangana Cyber Security Bureau (TGCSB) started the New Year with a special initiative called ‘Cyber Jaagrookta Diwas’. On 08/01/2025, the bureau held 394 meetings and 23 awareness rallies across the state. These events aimed to educate people about the risks of digital arrest scams, reaching 35,700 participants from all walks of life. The campaign focuses on teaching citizens about emerging cyber threats and promoting public safety online. It emphasizes the importance of practicing good cyber hygiene, being cautious while using the internet, and understanding the dangers of sharing personal or financial details with strangers. Throughout January, TGCSB will continue its mission to spread awareness about digital arrest scams. This will include organizing workshops, community outreach programs, and additional rallies to educate more people. These scams involve fraudsters pretending to be law enforcement officials. They claim that the victim is under investigation or has an outstanding arrest warrant and demand payments through RTGS or NEFT to avoid immediate arrest. Scammers often use fake documents, spoofed caller IDs, or video calls to make their claims appear legitimate. The bureau has issued a reminder to the public: no police officer or law enforcement agency will conduct investigations over phone or video calls, or demand money transfers for any reason. Genuine officers do not ask for payments to cancel warrants or settle cases. In its advisory, TGCSB urged citizens to stay alert and avoid falling prey to such digital arrest scams. “Be skeptical of any calls, messages, or emails claiming to be from law enforcement or government agencies that request immediate payment or sensitive information,” the bureau advised. By staying informed and cautious, people can protect themselves from these fraudulent schemes.

Cyber-crime police station issues advisory over fraudulent websites offering online booking during MahaKumbh

The Mahakumbh is set to be held in Prayagraj starting January 13 and will continue till February 26. Lakhs of devotees from across the country and even abroad are expected to visit the Kumbh Mela. THE CYBER CRIME police station in Pimpri Chinchwad has issued an advisory, cautioning residents about fraudulent websites swindling people on the pretext of online booking for stay and passes or seeking donations for events. The Mahakumbh is set to be held in Prayagraj starting January 13 and will continue till February 26. Lakhs of devotees from across the country and even abroad are expected to visit the Kumbh Mela. An advisory issued by the Pimpri Chinchwad police on 09/01/2025 night read, “A large number of fake websites, links, and other platforms have been created on the internet and social media to exploit the faith of the devotees who wish to visit the Mahakumbh. This has come to the attention of the Indian Cyber Crime Coordination Centre (I4C) of the Ministry of Home Affairs. On this background, Pimpri Chinchwad police are issuing an advisory cautioning people to beware of these scams.” The advisory further reads, “The victim can be potentially cheated in different ways. Fraudulent websites, links, and other platforms can cheat people on the pretext of collecting donations from devotees. Devotees can also be cheated on the pretext of bookings for hotels, tents, and other types of accommodations at the event.” Some of these platforms can ask devotees to download malicious files and gain access to the users’ devices, officials said. The advisory further reads, “Devotees should not click on any questionable websites or links. All the official information about the Mahakumbh can be obtained from kumbh.gov.in which is the official website of the event. Do not share sensitive financial information, or passwords with the callers or platforms. Approach the cybercrime helpline or nearest police station in case of suspicion of cheating.” Officials said that cyber dost, which is the official platform of the I4C, has shared names of authorized locations for stays, hotels, and guest houses for Kumbh. When contacted, Deputy Commissioner of Police (Crime) for Pimpri Chinchwad Sandeep Doiphode said, “We have not yet reported any cases of cheating related to Mahakumbh. However, based on observation from Central entities, we have issued the advisory cautioning people as a large number of devotees from here may visit the event.”

Cyber Fraud Victim Wins: Supreme Court Directs SBI to Repay Stolen Funds

The Supreme Court has upheld justice for a cyber fraud victim, directing the State Bank of India (SBI) to refund Rs 94,000 stolen during an online scam. The judgment highlights the bank’s accountability and failure to act promptly despite receiving timely fraud reports. In a landmark judgment, the Supreme Court of India directed the State Bank of India (SBI) to refund Rs 94,000 to a victim of cyber fraud from Assam. The case has brought into sharp focus the responsibilities of financial institutions in safeguarding their customers’ funds against fraudulent activities. The Incident The cyber fraud occurred when the victim attempted to return a Louis Philippe blazer worth Rs 4,000. Posing as a customer service representative, the fraudster tricked the victim into installing a malicious app, leading to the theft of Rs 94,204 from his SBI savings account. The stolen money was transferred across multiple bank accounts via UPI transactions. The root of the issue lay in a 2021 data breach on Louis Philippe’s website, which compromised sensitive customer details, including the victim’s contact information. Exploiting this data, the fraudster carried out the scam, leaving the victim with a blazer he no longer wanted and an empty bank account. Legal Battle After discovering the fraudulent transactions, the victim immediately contacted State Bank of India to block his account and card. He also filed complaints with the Assam Police, the RBI Banking Ombudsman, and the Ministry of Home Affairs through its National Cyber Crime Reporting Portal. However, he faced resistance from State Bank of India , which refused to take responsibility, citing the use of Google Pay—a third-party app not recommended by the bank. Unyielding, the victim pursued legal remedies through the Gauhati High Court, which found State Bank of India at fault for not taking timely action despite being informed within hours of the scam. The High Court ordered the bank to refund the full amount. Supreme Court Verdict SBI escalated the matter to the Supreme Court, challenging the High Court’s decision. However, the apex court upheld the previous judgment, emphasizing that the bank, equipped with advanced technology, failed to act promptly to prevent the fraud. The Supreme Court ordered State Bank of India to refund the stolen amount and recover it from the fraudster, who had been apprehended by the Assam Police. The court also highlighted the importance of vigilance by both banks and customers. While banks must utilize their technological resources to detect and prevent cyber fraud, customers are advised to exercise caution when sharing sensitive information or using third-party payment apps. Key Observations SBI was informed of the fraud within hours but failed to take corrective action, such as lodging a chargeback request or initiating investigations. The bank’s argument, citing Google Pay’s third-party status, was rejected by the court, which held SBI accountable for protecting its customers’ interests. The judgment serves as a precedent, reinforcing the accountability of banks in cyber fraud cases and emphasizing timely action to mitigate losses. Conclusion This case underscores the increasing prevalence of cyber fraud and the need for both banks and customers to remain vigilant. The Supreme Court’s ruling has not only delivered justice to the victim but also set a benchmark for addressing cybercrime-related financial disputes, ensuring that victims are not left to bear the brunt of such crimes.

Mahakumbh 2025: Cyber fraudsters dupe elderly man of Rs 1 lakh while booking tickets

MahaKumbh 2025: With over 40 crore pilgrims expected to arrive in Prayagraj, the authorities have extensive preparations for the mega-religious event. The MahaKumbh will be held here in Prayagraj between January 13 and February 26. The Mumbai police have registered a case against an unidentified person for allegedly duping a senior citizen to the tune of Rs 1 lakh on the pretext of booking a flight ticket to Prayagraj for the upcoming Maha Kumbha Mela, an official said on 07-01-2025. If you plan to visit the holy city Prayagraj to attend the Maha Kumbh Mela, you must stay alert for online fraudsters. An eye-opener case registered in Mumbai in which a cybercriminal targeted an elderly man. According to the Mumbai police, a case has been registered against an unidentified person for allegedly duping a senior citizen to the tune of Rs 1 lakh on the pretext of booking a flight ticket to Prayagraj for the MahaKumbh Mela. “The senior citizen, a businessman from Andheri, wished to attend the MahaKumbh in Prayagraj in Uttar Pradesh. While searching for booking options online, he came across a website. He called the number mentioned there and told the person about his travel requirements,” a Versova police station official said. The fraudsters asked him to pay Rs 14,000 for the accommodation arrangements for three people. Believing the offer, the victim transferred the amount. Soon afterward, the scammers asked if the complainant wanted flight tickets from Mumbai to Prayagraj and back, he said. They quoted an additional Rs 87,000 for flight bookings. Trusting them again, the victim’s son transferred the money online. However, they did not give the flight tickets to the victims, he said. Realizing that they had been duped, the complainant approached the police and filed a complaint. The police have registered a case against unidentified persons and are investigating the matter, an official added. The Maha Kumbh Mela 2025 will begin on January 13 and is set to conclude on February 26.

Gmail’s Holiday Scam Defense: How AI is Keeping Your Inbox Safe

As the holiday season kicks into full gear, so does a rising wave of email scams. Scammers seize this time of year, using deceptive tactics to trick people into giving away sensitive information or money. Whether it’s fake invoices, celebrity endorsements, or malicious threats, these fraudulent emails are everywhere. If you’re a Gmail user, you’re in luck. Google has ramped up its defenses, fighting back with new, innovative AI technology designed to protect billions of inboxes—especially during this high-risk season. Here’s a look at how email scams is stepping up its game to combat these scams and what you can do to stay safe in your inbox. Scammers Go into Overdrive This Holiday Season Every year, as the holiday season approaches, email scammers go into overdrive. With billions of emails exchanged daily, especially during sales events like Black Friday and Cyber Monday, the sheer volume of email traffic presents a perfect storm for scammers to launch their attacks. Since mid-November, we’ve seen a massive uptick in suspicious email activity, making it even harder to spot malicious messages. It’s no surprise that scammers are targeting holiday shoppers—whether it’s an urgent invoice, an enticing offer from a “celebrity,” or a threatening message to extort money. The holidays make people feel hurried and vulnerable, making them easy prey for these deceitful tactics. Email Scams Security Features: Keeping You Safe from Scams As the world’s largest email provider with over 2.5 billion users, Gmail recognizes the responsibility it has in keeping users safe. Over the years, Gmail has invested heavily in security measures to combat spam, phishing, and malware, blocking over 99.9% of these threats before they even reach your inbox. These efforts are especially crucial during the holidays, as the volume of attacks increases. email scams has seen a 35% decrease in the number of scams reaching users’ inboxes this holiday season compared to last year. This improvement is largely thanks to new AI-powered features rolled out over the past year, which have made Gmail’s defenses stronger than ever. How AI is Transforming Gmail’s Defense Against Scams AI is at the heart of email scams defense against scams, leveraging advanced models to protect users from a wide variety of threats. One such model is a large language model (LLM) that’s been trained to recognize the subtle patterns of phishing, malware, and spam. This AI has made a huge difference, blocking 20% more spam than ever before and reviewing 1,000 times more user-reported spam each day. This means fewer unwanted and potentially dangerous emails slip through the cracks. Additionally, a newly introduced AI model acts like a “supervisor” to help filter out risky messages. By instantly evaluating hundreds of threat signals when a suspicious message is flagged, it deploys protections in the blink of an eye, ensuring quicker and more effective detection of potential scams. Top Scams to Watch Out for This Holiday Season While Gmail’s defenses are stronger than ever, users need to stay vigilant. Scammers are always adapting and trying new tactics. Here are the top three email scams that are making waves this holiday season: Invoice ScamsScammers send fake invoices claiming that you owe money for a product or service. These emails often ask for urgent action, and scammers may even go as far as to convince victims to call and dispute the charges, using that connection to further trick them into making payments. Celebrity ScamsMany scams this year feature celebrity names—whether pretending the email is from the celebrity themselves or claiming they endorse a product or service. The goal is to exploit the trust people have in famous personalities to convince them to act on fraudulent offers. Extortion ScamsThese vicious scams involve threats, such as emails with personal information (like your home address or even a picture of your house). Some of these emails include threats of harm or blackmail, demanding money in exchange for keeping supposedly acquired personal material secret. 4 Simple Tips to Stay Safe This Holiday Season While Gmail’s defenses are incredibly effective, scammers are always evolving. It’s just as important for you to be cautious when handling emails. Here are four simple tips to stay safe: Slow it DownScams often create a sense of urgency with phrases like “immediate action required” or “deactivate now.” Take a deep breath and think through the message before you act. Spot CheckDouble-check the details. Does the email make sense? Validate the sender’s email address to ensure it’s legitimate. Scammers often use addresses that seem close to real ones but have small discrepancies. Stop! Don’t SendLegitimate companies or people will never demand immediate payment or personal information through email. If you’re unsure, don’t respond—just delete the message. Report Suspicious EmailsIf you spot a suspicious email, report it as spam or phishing in Gmail. Doing so not only helps protect you, but it also helps Gmail improve its security defenses for all users. Conclusion: Stay Safe and Secure with Gmail The holiday season may bring festive cheer, but it also brings an uptick in malicious email activity. Gmail’s new AI technology is designed to fight back against these threats, blocking millions of harmful emails before they reach your inbox. However, staying vigilant and following basic email security tips can further ensure that you don’t fall victim to scams. By working together—whether it’s email scams powerful defenses or your awareness—you can keep your inbox secure this holiday season and beyond. Stay safe, stay informed, and report any suspicious emails to help keep the digital world safer for everyone.

Chinese Hackers Double Cyber-Attacks on Taiwan

Taiwanese government networks experienced a daily average of 2.4 million cyber-attacks in 2024, most of which were attributed to Chinese state-backed hackers. This represents double the daily average from 2023 which saw 1.2 million daily attacks targeting government networks, Taiwan’s National Security Bureau said in a new report. “Although many of those attacks have been effectively detected and blocked, the growing numbers of attacks pinpoint the increasingly severe nature of China’s hacking activities,” the Bureau warned. The report also highlighted a substantial rise in People’s Republic of China (PRC) cyber-attacks targeting critical industries in Taiwan. These include telecommunications (650% increase), transportation (70%), and defined supply chain (57%). Security researchers have also observed significant Chinese cyber-attack activity in Taiwan over recent years amid rising geopolitical tensions around the Island territory’s self-governing status. How Chinese Hackers Target Taiwan The report highlighted a range of techniques employed by People’s Republic of China (PRC) hackers and noted that attacks against Taiwanese government agencies are typically designed to steal confidential data. The Bureau said the People’s Republic of China (PRC) hackers often exploit vulnerabilities in Netcom devices and utilize evasion techniques such as living off the land. Social engineering techniques have also been deployed which target the emails of Taiwanese civil servants for espionage purposes. China uses a range of tactics to infiltrate and compromise Taiwan’s critical infrastructure systems, such as highways and ports, to disrupt the Island’s transportation and logistics. Other cyber-attack tactics include phishing attacks, compromise of zero-day vulnerabilities, and use of Trojans and backdoors. Additionally, DDoS attacks are used to “harass” and “intimidate” Taiwan when carried out in the Island’s transportation and financial sectors. At the same time, China conducts military drills in the area, the Bureau noted. Other commonly observed Chinese attacks against Taiwanese targets include: Ransomware and other cybercrime techniques against manufacturing companies Theft of information about patented technologies developed by start-ups Stealing personal data of Taiwanese nationals and selling that information on the dark web The Bureau said the hack and leak of Taiwanese citizens’ data helps generate profits and are also designed to undermine the credibility of the Taiwanese government. “China has continued to intensify its cyber-attacks against Taiwan. By applying diverse hacking techniques, China has conducted reconnaissance, set cyber-attack ambushes, and stolen data through hacking operations targeting Taiwan’s government, critical infrastructure, and key private enterprises,” the Bureau wrote. The report also highlighted the success of Taiwan’s joint security defines a mechanism for ensuring that threat information is shared in real-time among intelligence sources and government agencies.

BSF Inspector duped of over Rs 70 Lakh after making ‘digital arrest’ in Gwalior

Bhopal: A Border Security Force (BSF) official in Gwalior was held in the longest digital arrest for 32 days before his son came to his rescue. The victim identified as Absar Ahmed, posted as an inspector in the BSF Training Centre, Tekanpur, was under digital arrest from December 2, 2024, and was duped of Rs 71.25 lakh in 34 transactions during the period, police said. “We have received the complaint regarding the digital arrest of a BSF official. The crime branch has registered a case and the probe is on,” Gwalior district superintendent of police (SP) Dharamveer Singh said. According to the police, the BSF official, a resident of Uttar Pradesh, had received a WhatsApp call at 11.29 am on December 2, 2024. The identified Mumbai cyber and crime branch officer told the victim that an arrest warrant had been issued against him and his family members in connection with a money laundering case. The BSF official was told that he was being interrogated virtually and he and his family members would be arrested if he informed other people. He was asked to transfer money to particular accounts as part of the probe and the money would be returned if he was found innocent. Under psychological pressure, Ahmed sold his flat in Delhi exhausted all his savings, and transferred Rs 71.25 lakh to the accounts mentioned. His son rushed to Gwalior on January 2 after learning about it and asked him to file a police complaint.

Youtuber Ankush Bahuguna shares 40-hour digital arrest scam ordeal urges vigilance

January 6, 2025: Popular content creator Ankush Bahuguna recently revealed a harrowing 40-hour ordeal in which he was held in a “digital arrest” by cybercriminals. In a deeply emotional video shared on Instagram, Ankush recounted how scammers isolated him from friends and family, coerced him into performing suspicious financial transactions, and manipulated him through fear and threats. The ordeal began with a seemingly harmless automated call about a suspicious package linked to his name. Following instructions, he pressed a button for customer support, unknowingly falling into an elaborate scam trap. A fake official on the call claimed the package contained illegal substances bound for China and an digital arrest warrant had been issued in his name. Isolation and Manipulation Panicked, Ankush was connected to someone posing as a law enforcement officer. This person accused him of money laundering, drug trafficking, and being involved in serious crimes. He was then placed under so-called “self-custody,” isolating him entirely from the outside world. For 40 hours, Ankush was kept on a continuous video call, and forbidden from answering messages, picking up calls, or contacting anyone. Under duress, he was forced to share sensitive information, perform bank transactions, and follow every instruction the scammers gave. “I was crying and begging, but they kept me on the call. They convinced me my career would be destroyed, my family was in danger, and I would face abuse if I didn’t comply,” Ankush shared, visibly shaken. Friends and Family Intervene Ankush’s family and friends grew suspicious of his erratic behavior throughout the ordeal. His sister’s persistent messages finally reached him, revealing that such “digital arrests” are a common scam. Realizing the truth, Ankush broke free from the scammers’ grip and reconnected with his family. “I’m so grateful for my friends’ instincts. If they hadn’t acted quickly, I might still be trapped in that nightmare,” he admitted. A Warning to All Ankush urged his followers to be cautious of such scams and never engage with suspicious calls or share sensitive information online. “The thing with these digital arrest is, if you believe one lie, they tell ten more, each scarier than the last. Please be vigilant and report such incidents immediately,” he concluded. This incident highlights the growing sophistication of cyber scams and serves as a stark warning about individuals’ vulnerabilities in an increasingly digital world.

Cyber Fraud: UP Police shares must-watch video ahead of Mahakumbh

Ahead of the Mahakumbh Mela, which is scheduled to begin on January 13, the Uttar Pradesh Police released an awareness video on its social media account on 05/01/2025, urging people to stay cautious of cyber fraud related to any kind of online booking for the Mahakumbh. Mahakumbh Mela The Mahakumbh in Sangam Nagari Prayagraj is likely to be attended by 40 crore people. In light of the rising incidents of cyber fraud in recent times, this video has been created to create awareness among people about digital fraud. The Video’s Message: The short film portrays the experience of a family who falls victim to cyber fraud while booking a hotel online. Tempted by attractive offers, the family makes a booking through a fake website. However, upon reaching the given location in Prayagraj, they find an empty plot instead of the promised hotel. In another instance, the family scans a QR code displayed on the street to book a stay, but instead of securing their booking, their money gets deducted fraudulently. Towards the end, Bollywood actor Sanjay Mishra appears in the video, cautioning people about such scams and advising them to avoid fake links and websites. Safety Advice: Sanjay Mishra urges devotees to use the official Maha Kumbh website Kumbh.gov.in to check the list of verified accommodations and make bookings. The video has been shared across all social media platforms of the Uttar Pradesh Police. Additionally, a link to the list of available accommodations in Prayagraj has been provided to assist devotees in making safe and informed decisions. Important Information for Devotees: Devotees planning to visit Prayagraj during the Maha Kumbh 2025 are encouraged to use the verified list or official website for their bookings. This initiative by the Uttar Pradesh Police aims to safeguard devotees from cyber fraud while ensuring a secure and smooth pilgrimage experience during the Maha Kumbh 2025.

Beware of online sextortion: boys and girls

Online Sextortion occurs when a fraudster threatens to circulate your private and sensitive material online if you do not provide images of a sexual nature, sexual favors, or money. The perpetrator may also threaten to harm your friends or relatives by using information they have obtained from electronic devices unless you comply with their demands. Sextortion is a form of Online Sextortion abuse, wherein the cybercriminal makes use of various channels like instant messaging apps, SMS, online dating apps, Online Sextortion media platforms, porn sites, etc., to lure the users into intimate video/audio chats and makes them pose nude or obtains revealing pictures from them. The fraudsters later make use of this material to harass, embarrass, threaten, exploit, and blackmail the victims. Dangers Abuse and Exploitation Harassment Blackmail Threats of public humiliation Mental distress Modus Operandi The fraudsters try to lure the users into sharing intimate content in different ways posting messages for video/audio chat using fake accounts/profiles creating pages/ad campaigns The users get victimized when they pay for such services and pose nude or in a compromising position in video calls accepts or sends friend requests to the fake account/profile and is involved in intimate interaction posing nude in video chats, sending revealing pictures, etc., The fraudster records video/ takes screenshots/ takes pictures/makes use of revealing pictures/morphs the pictures sent The fraudster starts blackmailing the victim leading to sextortion. The users of porn sites may also fall prey to sextortion when their chats/video calls on porn sites are used for blackmail by fraudsters. Channels used for trapping the victims into sextortion The fraudsters resort to sextortion following the modus operandi given above using various channels like – Messaging apps Dating apps Online Sextortion media platforms Porn sites etc., Warning signs indicate attempts of sextortion by cybercriminals Repeated untoward messages/video calls from unknown number/s Repeated friend requests from an unknown person Repeated requests for private intimate pictures, video chats, photos Manipulating or redirecting the conversation toward intimate topics Rush through the things and try to develop intimacy Warning signs that may indicate victimization Signs of fear, nervousness, anxiety, depression Isolating self and being very reactive & emotional Feeling desperate and frustrated Having suicidal thoughts and self-harming behavior. Safety tips to protect yourself against online sextortion Never share any compromising images, posts, or videos of yourself with anyone, no matter who they are Remember that the internet never forgets or forgives. If you have shared something once, it will remain present on the Net forever, in one form or the other. Never accept or request friendship from unknown people on social media platforms. Enable privacy and security features on your Online Sextortion media accounts and instant messaging apps. Use the “Report User” option on Online Sextortion media platforms to report any such Do not share your personal/private pictures publicly. Turn off your electronic devices and web cameras when you are not using them. Use two-factor authentication with strong passwords and different passwords for different social media accounts. During an Online Sextortion interaction or chat, if the person on the other side is trying to rush through things and develop intimacy, then it is cause for alarm. Never allow anyone, however close to capture any private part or intimate activity with any device. Such data can be misused at a later stage. Do not accept video calls or open attachments from people you do not know. Save the evidence and the screenshots for referring to the incident later. Do not suffer in silence, know that you are not alone, and reach out and seek help from trusted family and friends. File a complaint against sextortion Online Sextortion or at your nearest cybercrime cell. Remember that you can also anonymously file an Online Sextortion complaint against such an offense on the national cybercrime reporting portal cybercrime.gov.in. Avoid clicking intimate/nude/semi-nude photos/videos on your phone, which if leaked could cause embarrassment. Several rouge mobile apps could access your gallery/storage and can be used to blackmail you. Don’t hesitate to file a complaint or contact the police due to shame, embarrassment, and self-blame. Know what the Law Says about this offense? It is a punishable offense by law and attracts sections 354 (D), 506 / 507, 509 IPC, and 384 IPC, and Sec.67 of the IT Act is also applicable. Offenders in such crimes usually thrive on the victim’s silence and lack of clarity in the law. Hence, everyone needs to be aware of the codes and sections that will help them in such cases. Section 108(1)(i)(a) of the Criminal Procedure Code empowers the victim to call the magistrate of her locality and inform him/her about the person whom she believes could circulate any obscene matter. The magistrate has the power to detain such person(s) and can order him to sign a bond to stop him from circulating the material. This might deter the accused. This is a quick remedial section because the victim can complain to the magistrate without any direct evidence against the accused. Section 292 of the Indian Penal Code (IPC) incriminates any person who distributes or threatens to disperse any intimate and compromising images of someone through any electronic means, including apps and other social media. If a picture of the woman is clicked obscenely without her knowledge and is distributed, a voyeurism case under Section 354C of the IPC can also be filed along with the aid of other relevant sections from the Information Technology Act.

cyber security